Privacy Policy
This Privacy Policy explains how EWall Solutions Pvt Ltd (“EWall Solutions”, “we”, “us”) collects, uses, shares, and protects information when you use EWall Web Genius (the “Service”). It forms part of, and should be read with, our Terms & Conditions.
1. Who we are
EWall Solutions Pvt Ltd operates the Service, an AI website builder for Odoo. For data you submit to the Service and the account/billing data we hold about you, we act as the data controller. For the website content we read and write inside your Odoo instance on your instruction, you are the controller and we act as a processor on your behalf. Contact details are in Section 16.
2. Information we collect
| Category | Examples | Why we hold it |
|---|---|---|
| Account data | Email address; a hashed password; email-verification and password-reset tokens. | To create and secure your account and sign you in. |
| Subscription & billing data | Subscription status, plan, dates, and payment-provider references (e.g. a PayPal subscription/transaction ID). We do not store full card numbers. | To process payments, manage renewals, and provide receipts. |
| Connection data | Your Odoo base URL, database name, database identifier, and Access Token binding (see Section 3). | To connect the Service to your Odoo instance and keep your token bound to it. |
| Usage & technical data | Session identifiers, IP address, request metadata, and server logs. | To run the Service, apply rate limits, prevent abuse, and diagnose issues. |
| Content you submit | Prompts, instructions, and the page content the Service builds or edits. | To carry out your building and editing requests. |
| Communications | Emails you send us and support requests. | To respond to and support you. |
3. Data from your Odoo instance
To operate the Service we access a limited set of information from the Odoo instance you connect, as also described in our Terms:
- A stable database identifier — your Odoo’s
database.uuid. We read this at activation and on subsequent requests solely to bind your Access Token to a single instance and stop it being reused on a different Odoo. It is an opaque value and is not used to track individuals. - Your instance address and database name — to connect to the correct instance.
- Website identifiers — the website ID and name you are editing, to route changes to the right site.
- Website page content — layouts, snippets, page markup, and header / footer / menu structures we read and write to build pages, plus the version snapshots we keep so changes can be rolled back.
We do not access unrelated business data in your Odoo instance. Any personal data that happens to be present in your website content remains under your control as the controller of that data.
4. How we use information
We use the information above to:
- provide, maintain, and improve the Service;
- authenticate you and keep your account and Subscription secure;
- process payments, renewals, and send transactional emails (verification codes, password changes, payment receipts, renewal reminders, activation confirmations);
- carry out your building and editing requests, including routing your prompts and page content to your chosen AI provider;
- apply rate limits, detect and prevent abuse, and protect the Service; and
- comply with legal obligations.
Our legal bases (where GDPR applies) are performance of our contract with you, legitimate interests in securing and improving the Service, consent where required, and compliance with legal obligations.
5. AI providers & your prompts
The Service uses a bring-your-own-key model. When you build or edit a page, your prompts and the relevant page context are sent to the AI provider whose API key you have configured — for example Anthropic, OpenAI, Google, Groq, Mistral, or OpenRouter (or a local model if you self-host one). You contract directly with that provider, and your prompts and content are processed under that provider’s privacy policy and terms.
Because you choose the AI provider, please review that provider’s privacy policy to understand how it handles the prompts and content it receives.
6. Use of data for AI training
We do not use your prompts, your page content, or your Odoo data to train our own machine-learning models. We do not sell your personal data. Whether a third-party AI provider uses inputs to improve its models is governed by that provider’s own terms, which you should review when choosing a provider and configuring your key.
8. Subprocessors
We rely on a small number of third parties to provide the Service. Each processes only the data needed for its function:
| Provider | Purpose | Data involved |
|---|---|---|
| Payment processor (e.g. PayPal) | Process payments and subscriptions | Billing identifiers, transaction data |
| Email / SMTP provider | Send transactional emails | Email address, message content |
| AI provider (your choice) | Generate and edit page content | Prompts, page context |
| Hosting & infrastructure | Run the Service and store data | All categories above, at rest |
We will keep this list current. If you would like the specific entities we currently use, contact us at [email protected].
10. Data retention
We keep account, subscription, and connection data for as long as your account is active and as needed to provide the Service. Billing records are retained as required for tax and accounting purposes. Short-lived tokens (email verification, password reset) expire automatically, and server logs rotate on a rolling basis. When you ask us to delete your account, we remove or anonymise your personal data except where we must retain it to meet legal obligations or resolve disputes.
11. How we protect data
We apply reasonable technical and organisational measures, including:
- passwords stored only as salted, hashed values (never in plain text);
- encryption of sensitive secrets at rest;
- encryption in transit (HTTPS/TLS) in production;
- Access Tokens bound to a single verified Odoo instance to prevent reuse elsewhere;
- rate limiting, CSRF protection, and tenant isolation between customers.
No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your information and to notify you of material incidents where required by law.
12. International transfers
We are based in India, and our subprocessors and your chosen AI provider may process data in other countries. Where personal data is transferred across borders, we rely on appropriate safeguards as required by applicable law. By using the Service, you understand that your information may be processed in countries other than your own.
13. Your rights
Depending on where you live, you may have rights to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, contact us at [email protected]; we will respond within the timeframes required by applicable law (including India’s Digital Personal Data Protection Act and, where relevant, the GDPR). You also have the right to complain to your local data-protection authority.
14. Children
The Service is intended for users aged 18 and over and is not directed at children. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us and we will delete it.
15. Changes to this Policy
We may update this Policy from time to time. When we do, we will revise the “Last updated” date above and, for material changes, take reasonable steps to notify you. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.
16. Contact & grievances
For privacy questions or to exercise your rights, contact EWall Solutions Pvt Ltd at [email protected]. We will acknowledge and address grievances in line with applicable data-protection law.